Argument Filterings and Usable Rules 
in Higher-Order Rewrite Systems 



SUZUKI Shot, KUSAKARI Keiichirout, 
Frederic BLANQUI^ 

t Graduate School of Information Science, Nagoya University 
t INRIA, France 

The static dependency pair method is a method for proving the ter- 
mination of higher-order rewrite systems a la Nipkow. It combines the 
dependency pair method introduced for first-order rewrite systems with 
the notion of strong computabihty introduced for typed A-calculi. Ar- 
gument filterings and usable rules are two important methods of the de- 
pendency pair framework used by current state-of-the-art first-order au- 
tomated termination provers. In this presentation, we extend the class of 
higher-order systems on which the static dependency pair method can be 
applied. Then, we extend argument filterings and usable rules to higher- 
order rewriting, hence providing the basis for a powerful automated ter- 
mination prover for higher-order rewrite systems. 

1 Introduction 

Various extensions of term rewriting systems (TRSs) |29j for handling functional 
variables and abstractions have been proposed [T3 l [22 l [T H [23 l [T5] . In this paper, 
we consider higher-order rewrite systems (HRSs) j22j . that is, rewriting on /?- 
normal 7y-long simply-typed A-terms using higher-order matching. 

For example, the typical higher-order function foldl can be defined by the 
following HRS: 



foldl(Ax?/.F(a;,j/),X,nil) ^ X 
io\(i\{\xy.F{x,y),X,coxis{Y,L)) Mdl{Xxy.F{x,y), F{X,Y), L) 



Here we suppose that the function foldl has the type (N — > N — > N) — > L — >■ N, 
and L is a type of natural number's list. Then, the functions sum and len, 
computing the sum of the elements and the number of elements respectively, 
can be defined by the following HRSs: 

( add(0,r) ^ Y 
i?sum = i?foidiU<^ add(s(X),r) ^ s(add(X,y)) 

[ sum(L) — !> foldl(Axy.add(x, J/), 0, L) 

i?icn = ^foidi U { lcn(L) — !• foldl(Aa;y.s(.T), 0, L) 

In the HRS i?ion, the anonymous function Xxy.s{x) is represented by using A- 
abstraction. 
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The static dependency pair method is a method for proving the termina- 
tion of higher-order rewrite systems. It combines the dependency pair method 
introduced for first-order rewrite systems [1] with Tait and Girard's notion of 
strong computabihty introduced for typed A-calcuh [9]. It was first introduced 
for simply-typed term rewriting systems (STRSs) [17] and then extended to 
HRSs [IH]. The static dependency pair method consists in showing the non- 
loopingness of each static recursion component independently, the set of static 
recursion components being computed through some static analysis of the pos- 
sible sequences of function calls. 

This method applies only to plain function-passing (PFP) systems. In this 
paper, we provide a new definition of PFP that significantly enlarges the class 
of systems on which the method can be applied. It is based on the notion of 
accessibility introduced in [3] and extended to HRSs in [2]. 

For the HRS i?sum U i?ion, the static dependency pair method returns the 
following two components; 

{ foldl*(A.Tj/.F(.T,y),X,cons(y,i)) Md\\Xxy.F{x,y), F{X,Y), L) } 
{ add''(s(X),r) ^ add«(X,y) } 

The static dependency pair method proves the termination of the HRS i?sum U 
.Rion by showing the non-loopingncss of each component. 

In order to show the non-loopingness of a component, the notion of reduction 
pair is often used. Roughly speaking, it consists in finding a well-founded quasi- 
ordering in which the component rules are strictly decreasing and all the original 
rules arc non-increasing. 

Argument filterings, which consist in removing some arguments of some 
functions, provide a way to generate reduction pairs. First introduced for TRSs 
[1], it has been extended to STRSs [TStllSj. In this paper, we extend it to HRSs. 

In order to reduce the number of constraints required for showing the non- 
loopingness of a component, the notion of usable rules is also very important. 
Indeed, a finer analysis of sequences of function calls show that not all original 
rules need to be taken into account when trying to prove the termination of a 
component. This analysis was first conducted for TRSs [71 [10] and has been 
extended to STRSs [27l[18]. In this paper, we extend it to HRSs. 

All together, this paper provides a strong theoretical basis for the devel- 
opment of an automated termination prover for HRSs, by extending to HRSs 
some successful techniques used by modern state-of-the-art first-order termina- 
tion provers like for instance [H [10] . 

The remainder of this paper is organized as follows. Section 2 introduces 
HRSs. Section 3 presents the static dependency pair method and extend the 
class of systems on which it can be applied. In Section 4, we extend the argument 
filtering method to HRSs. In Section 5, we extend the notion of usable rules on 
HRSs. Concluding remarks are given in Section 6. 
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2 Preliminaries 



In this section, wc introduce the basic notions for HRSs according to |22[ [2T] . 

The set S of simple types is generated from the set B of basic types by the 
type constructor A functional or higher-order type is a simple type of the 
form a p. We denote by [>s the strict subterm relation on types. 

A preterm is generated from an infinite set of typed variables V and a set of 
typed function symbols E disjoint from V by A-abstraction and A-application. 
The set of typed preterms is denoted with 7~p'"'=. We denote by ij, the 77- long 
/3-normal form of a simply-typed preterm t. The set T of (simply-typed) terms 
is defined as {t\, \ t G T'^''^}, xhe unique type of a term t is denoted by type{t). 
We write Va (resp. 7ii) as the set of variables (resp. terms) of type a, The 
a-equivalence of terms is denoted by =. The set of free variables in a term t is 
denoted by FV{t). Wc assume for convenience that bound variables in a term 
are all different, and are disjoint from free variables. In general, a term t is of 
the form Aa;i . . . Xm-ati . . .tn where a € EUV. We abbreviate this by Xx^.a{tn). 
For a term t = Xxm-a{tn), the symbol a, denoted by top{t), is the top symbol 
of t, and the set {tn}, denoted by args(t), is the arguments of t. We define the 
set Sub{t) of subterms of t by {t} U Sub{s) ii t = Xx.s, and {t} U ljr=i Sub{ti) 
ii t = a{tn). We use t >sub s to represent s G Sub{t), and define t t>sub s by 
t E^sub s and t ^ s. The set Pos(t) of positions in a term t is the set of strings 
over positive integers inductively defined as Pos{Xx.t) = {e}U{lp \ p S Pos{t)} 
and Pos{a{tn)) = {e} U Ur=i{*P I ^ ^O'S(ti)}. The prefix order -< on positions 
is defined by p ^ (7 iff pui = g for some w ^ e. The subterm of t at position p is 
denoted by t\p. 

A term containing a unique occurrence of the special constant of type 
a is called a context, denoted by C[]. We use C[t] for the term obtained from 
C[] by replacing with i € 7^. A substitution is a mapping from variables 
to terms such that 0{X) has the type of X for each variable X. We define 
dom{9) ~ {X I X\. ^ ^'(^)} and assume that dom{0) is always finite. A 
substitution 6 is naturally extended to a mapping from terms to terms. We 
use to instead of d{t) in the remainder of the paper. A substitution 9 is said 
to be a variable permutation if VA" G dom{9)3Y G dom{9).9{X) = Y], and 
9iX) = 9{Y) ^X = Y hold. 

Following |21j . a higher-order rewrite rule is a pair (Z, r) of terms, denoted by 
I r, such that topil) G S, t?/pe(0 = type(r) G B and FV{1) D FV{r). Since, 
by definition, terms are in 7]-long form, function symbols are always applied to 
the same (maximal) number of arguments. Considering non-?7-normal terms or 
rules of functional type is outside the scope of this paper. An HRS is a set of 
higher-order rewrite rules. The reduction relation of an HRS R is defined 
by s t iff s = (^[ZSI] and t = C[r9l] for some rewrite rule I ^ r & R, context 
C[] and substitution 9. The transitive and reflexive-transitive closures of are 
denoted by -j^ and , respectively. An HRS R is said to be finitely branching 
if {f \ t t'} is a finite set for any term t. 

A term t is said to be terminating or strongly normalizing for an HRS R, 
denoted by SN{R,t), if there is no infinite rewrite sequence of R starting from 



3 



t. We write SN{R) if SN{R, t) holds for any term t. A well-founded relation > 
on terms is a reduction order if > is closed under substitution and context. We 
notice that an HRS R is terminating iff i? C > for some reduction order >. 

A term t is said to be strongly computable in an HRS R if SC{R,t) holds, 
which is inductively defined on simple types as follows: SN{R, t) if type{t) G B, 
and Vw e Ta.{SC{R,u) ^ SC{R, itu)i)) if type{t) = a ^ (i. We also define 
the set Tsd"{R) = {t \ Vu G args{t).SC{R,u)}. 

Finally, we introduce the proposition required for later proof. 

Proposition 2.1 HU // s ^ t and 6^9' (i.e. V.t G V.xO ^ xd' ) then 
sdi^te'l. 

3 Improved Static Dependency Pair Method 

In this section, we introduce the static dependency pair method for plain function- 
passing (PFP) HRSs [19] but extend the class of PFP systems. 

The method in [19] applies only to PFP systems. From a technical viewpoint, 
we have noticed that the uncloscdness of strong computability with respect to 
the subterm relation is the reason why the method is not applicable to every 
HRS. Hence we can extend the applicable class for the method if more strongly 
computable subterms can be acquired. From the same motivation, Blanqui 
introduced the notion of accssibility to design a higher-order path ordering [2]. 
By using the notion of accessibility, we provide a new definition of PFP that 
enlarges the class of systems on which the method can be applied. 

Definition 3.1 (Stable subterms) The stable subterms oft are SSub{t) = 
SSubpY(^t-j{t) where SSubx{t) = {t} U SSub'-^{t), SSub'^{Xx.s) ~ SSubx{s), 
SSub'-^{a{tn)) ~ Ui=i SSubx{ti) if a ^ X, and SSub'^{t) = otherwise. 

Lemma 3.2 (1) SSub{t) C Sub{t). (2) If u e SSub{t) and dom{9) C FV{t), 
then u0i e SSub{tei). (3) If u G Sub{t) and t e SN , then u £ SN . 

Definition 3.3 (Safe subterms - New definition) The set o/ safe subterms 
of a term I is safe{l) ^ U/'Garss(;)i^^ I ^ ^ Acc{l' ) , FV (t) C FV{1')} where 
t G Acc{l') (t is accessible in I') if either: 

(0) . t = V, 

(1) . t£ SSubil'), type{t) G B and FV{t) C FV{1'), 

(2) . Xx.t G Acc{l') and x ^ FV{1'), 

(3) . t{x\.) G Acc{l') and x ^ FV{t) U FV{1'), 

(4) . f(U) G Acc{l'), ti = Xxl^.t, type(t) G B and {x^} n FV{t) = 0, 

(5) . a;(Q G Acc{l'), ti ^ t and x U FV{1'). 
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Strictly speaking, safe{l) may not be included in Sub{l) and, because of 
(3)[), accessible terms are /3-normal preterms not necessarily in 77- long form. 



Definition 3.4 (Plain Function-Passing [19]) j4n /fflS* i? is plain function- 
passing (PFP) if for any I ^ r E R and Z{r^) G Sub{r) such that Z G FV{r), 
there exists k <n such that Z[rk)], G safe{l). 

For example, the HRS i?foidi displayed in the introduction is PFP, because 
sa/e(foldl(Aa;y.i^(a;, y), X, cons(F, L))) = {Xxy.F{x,y),X,cons{Y,L),Y,L} and 
F^EEE \xy.F{x,y) G sa/e(foldl(Aa:;?/.F(a;, y), X, cons(y, L))). 



The definition of safcness given in [ini corresponds to cases ( |(0)[ ) and ((1) ). 
This new definition therefore includes much more terms, mainly higher-order 
patterns [20]. This greatly increases the class of rules that can be handled and 
the applicability of the method since it reduces the number of dependency pairs. 

For instance, the new definition allows us to handle the following rule: 

D{\x.sin{Fx))y D{Xx.Fx)y x cos{Fy) 



Indeed, /' = Aa;.sin(F2;) G Acc{l') by ([(0)| ), sin(i^x) G Acc{l') by ([(2)]), Fx G 



Acc{l') by ^ and F G Acc{l') by p)f 7 Therefore, safe{l) = {V , Xx.Fx,y}. 
With the previous definition, we had safc{l) = {^', y} only. 

Also, the new definition allows us to handle the following rule: 

y{\x.{Px A Qx)) -> V(Ax.Px) A \/{\x.Qx) 



Indeed, V = \x.{Px A Qx) G Acc{l') by ([(0)), Fx A G Acc{l') by p)] ), 
Px,Qa; G Acc{l') by ([(4]]), and P,Q G Acc{l') by ([(3)). Therefore, sa/e(0 = 
{V ,\x.Px,\x.Qx} . With the previous definition, we had safc{l) ~ {V} only. 

For the results presented in [19] to still hold, it suffices to check that this 
new definition of safeness still preserves strong computability (Lemma 4.3 in 
[19]). This can be shown by following the proof of Lemma 10 in [2]. 

Lemma 3.5 Let R he an HRS and I ^ r E R. Then 16\, G Tg}j'^{R) implies 
SC{R,t9\) for any t G safe{l) and substitution 0. 

Proof. We first prove that t9\. is strongly computable whenever t G Accil'), l'6\. 
is strongly computable, andxO is strongly computable for any x G FV{t)\FV{l'). 
Wlog we can assume that dom{9) C FV{t). We prove the claim by induction 
on the definition of Acc. 

(0) . Immediate. 

(1) . Since l'9\. is strongly computable, I'O], is strongly normalizing. By Lemma 

dl t9i G Sub{l'0i) and tOi is SN. Therefore, since type{t) G B, tOi is 
strongly computable. 

(2) . By definition of computability. 
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(3) . We have type{t) = a ^ p. So, let u £ Ta strongly computable and 

6' = 9^ {x ^ u} (x ^ dom{9) since x ^ FV{t)). Since x ^ FV{t), 
we have {tOl-u)\. = {t{x]r))6' By IH, {t{xl))9'], is strongly computable. 
Therefore, t9], is strongly computable. 

(4) . Since strong computability on base types is equivalent to SN and {xk} Cl 

FV(t) = 9. 

(5) . The term Pi = Xy^.yi can easily be proved strongly computable. Then, let 

6*' = 6* l+l {a; h-> p,} (x ^ dom{9) since x ^ Since x ^ FV{ti), 

we have {x{tn))9'l. = t^^^. By induction hypothesis, {x{tn))9'l. is strongly 
computable. Therefore, t6X = ti9\, is strongly computable. 

Let now u £ safe{l). We have u = t\. for some t e Acc{l') and V G args{l) with 
FV{t) C FV{1'). The term l'9X is strongly computable since 19-1 S TgQ^"{R). 
Since FV{t) C FV(l'), there is no x G FV{t) \ FV{1'). Therefore, u9i = t9i is 
strongly computable. □ 

This definition of safencss can be further improved (in case |(4)[ ) by using more 
complex interpretations for base types than just the set of strongly normalizing 
terms, but this requires to check more properties^. We leave this for future 
work. 

We now recall the definitions of static dependency pair, static recursion 
component and reduction pair, and the basic theorems concerning these notions, 
including the subterm criterion [T9| . 

Definition 3.6 (Static dependency pair [19]) Let R be an HRS. All top 

symbols of the left-hand sides of rewrite rules, denoted by Vji, are called defined 
symbols. 

We define the marked term by /"(tn) ift has the form f{tn) with f G T>ji; 
otherwise i» = t. Then, let = {/" | / ^ Vr}. 

We also define the set o/candidatc subterms as follows: Cand{Xx^.a{tn)) = 
{Ax;n^.a(t„)} U UILi Cand{Xx:;;^.ti). 

Now, a pair (Z", a'^{r^)), denoted by l^ — )> a'^{r^), is said to be a static 
dependency pair in R if there exists ? — > r G i? such that Xx^.a{r^) G Cand{r), 
a G T>fj, and a{rk)-l ^ safe(l) for all k < n. We denote by SDP{R) the set of 
static dependency pairs in R. 

Example 3.7 Let i?avc be the following FFF-HRS: 



sub(X, 0) 
sub(0, Y) 



X 




R. 



= Ri 



-sum 



U i?lcn U { 



sub(s(X),s(r)) 
div(0,s(y)) 

div(s(x),s(r)) 

ave(L) 



-> sub(X,y) 
^ 

^ s(div(sub(x,y),s(y))) 

div(sum(i), len(i)) 
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Then, the set 5'DP(i?avo) consists of the following eleven pairs: 



cons(y, L) 
a.dS{s{X),Y 

sum" (L 
sub''(s(X),s(y) 
div%{X),s{Y) 
div"(s(X),s(y) 
leii«(L 
ave»(L 
ave»(L 
ave»(L 



^ io\d\^(Xxy.F{x,y),F{X,Y),L) 

add«(X,r) 
^ Md\^i\xy.£idd{x,y),0,L) 
— !• add''(a:;,y) 

^ sub''(x,r) 

^ div»(sub(x,r),s(r)) 

^ iold\^{Xxy.s{x),0,L) 

div*(sum(L),lcn(L)) 

sum' (L) 
^ len»(L) 



Definition 3.8 (Static dependency chain \19\ ) Let R he an HRS. A se- 
quence Uq 1^0' ''^i ~^ 'A^T ■ ■ of static dependency pairs is a static depen- 
dency chain in R if there exist 9o,6i,... such that v^Oil -|> u'^-^^j+ij, and 
Ui0i-l, Vi9i-l G TgQ^^R) for all i. 

Note that, for all i, u\9i and v\6i are terminating, since strong computability 
implies termination. 



Proposition 3.9 \19l Let R he a PFP-HRS. If there exists no infinite static 
dependency chain then R is terminating. 



Proof. By using Lemma |g.5l instead of Lemma 4-3 in \19f , the proof of the 
correspondence theorem (Theorem 5.23 in U9f ) still holds. □ 

Definition 3.10 (Static recursion component [19]) Let R he an HRS. The 
static dependency graph of R is the directed graph in which nodes are SDP(R) 
and there exists an arc from — > to u"^ v'^ if the sequence , u'^ — )■ 

v'^ is a static dependency chain. 

A static recursion component is a set of nodes in a strongly connected suh- 
graph of the static dependency graph of R. We denote hy SRC'{R) the set of 
static recursion components of R. 

A static recursion component C is non-looping if there exists no infinite 
static dependency chain in which only pairs in C occur and every — > tj" e C 
occurs infinitely many times. 



Proposition 3.11 U9f Let R be a PFP-HRS such that there exists no infinite 
path in the static dependency graph. If all static recursion components are non- 
looping, then R is terminating. 
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ave«(L) div"(sum(L),len(L)) ► div"(s(X), s(r)) ^ div"(sub(X, y), s(y)) 



1 ave«(L) ^ sumf(L) ► sum''(L) add''(a;,y) 














sumlt(L) ^ foldl''(Axy.add(x,y),0,L) 1 1 ► add»(s(X),y) ^ add"(X,r) 




Md\\Xxy.F{x,y),X,cona{Y,L)) Md\^{Xxy.F{ 














ave«(L) ^ len'*(L) ► len'*(L) ^ foldl"(Aa;?/.s(x), 0, L) - 





Figure 1: The static dependency graph of i?. 



Example 3.12 For the PFP-HRS R^vc in Example \3.7[ the static dependency 
graph of i?avc is shown in Fig. Ql Then the set S'i?C(i?avc) consists of the 
following four static recursion components: 

{ Mdl\Xxy.F{x,y),X,cons{Y,L)) ^ io\d\^Xxy.F{x,y),F{X,Y),L) } 
{ add''(s(X),r) ^ add»(X,y) } 
{ sub«(s(X),s(r)) ^ sub"(X,r) } 

{ div«(s(x),s(y)) ^ div«(sub(x,r),s(r)) } 

In order to prove the non-loopingness of components, the notions of subterm 
criterion and reduction pair have been proposed. The subterm criterion was 
introduced on TRSs [TO], and then extended to STRSs [H] and HRSs [TO]. 
Reduction pairs |16| are an abstraction of the notion of weak-reduction order 

Definition 3.13 (Subterm criterion [19j) Let R be anHRSandC e SRC{R). 
We say that C satisfies the subterm criterion if there exists a function tt from 
to non-empty sequences of positive integers such that: 

• MU(top(««)) >sub wU(top(t,tt)) for some 6 C, 

• and the following conditions hold for every it" — >■ G C.' 

- u\Tr(top(u»)) !>su6 w|7r(top(i;tt)), 

- Vp ^ ■K{top{u^)).top{u\p) i FV{u), 

- and \fq ^ n(top{v^)).q = e V top{v\q) ^ FV{v) U Vb. 

Definition 3.14 (Reduction pair, Weak reduction order [ll 116] ) A pair 
(>, >) of relations is a reduction pair if> and > satisfy the following properties: 
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• > is well-founded and closed under substitutions, 

• > is closed under contexts and substitutions, 

• and >->C> 07->->C>. 

In particular, > is a weak reduction order i/ \ ^S) is a reduction pair. 

Proposition 3.15 U9j Let R be a PFP-HRS such that there exists no infinite 
path in the static dependency graph. Then, C G SRC{R) is non-looping if C 
satisfies one of the following properties: 

• C satisfies the subterm criterion. 

• There is a reduction pair (>, >) such that RC>,CC>U> and C n > 7^ 

0. 

Example 3.16 Let 7r(foldl'*) = 3 and 7r(add'') = 7r(sub*) = 1. Then, every 
static recursion component C except the one for div (cf. Examvle \3.1<i\} satisfies 
the subterm criterion in the underlined positions below. Hence, these static 
recursion components are non-looping. 

fo\d\*{\xy.F{x, y), X, cons(y, L) ) ^ io\d\^Xxy.F{x,y), F{X,Y), L)^ 
add^{s{X),Y) add»(X,y)} {sub»(s(X), s(r)) ^ sub»(X,y)| 



4 Argument Filterings 

An argument filtering generates a weak reduction order from an arbitrary re- 
duction order. The method was first proposed on TRSs [T], and then extended 
to STRSs [151 m] ■ Since this extension has the problem that this method may 
destroy the well-typedness of terms, Kusakari and Sakai improved the method 
so that the wcU-typcdness is never destroyed |18j . In this section, we expand 
this technique to HRSs. 

Definition 4.1 An argument filtering function is a function n such that, for 
every f € of type ai —t- a„ /3 with (3 G B, 7r(/) is either a positive 

integer i < n if on ~ (3, or a list of positive integers [ii, . . . , i^] with ii, . . . ,ik < 
n. Then, we extend the function tt to terms by taking: 

{Xxni.TT{ti) if a gYi and 7r(a) = i 

Ax;;r.a(7r(tiJ, . . . ,7r(t,J) if a e and n{a) = [ii,. .. ,ik] 
\x;;^.a{-K{ti),...,'n{tn)) ifaeV 

Given an argument filtering n and a binary relation >, we define s t by 
7r(s) > 7r(t) or 7r(s) = 7r(i), and s >^ t by 7r(s) > 7T(t). We also define 
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the substitution 9^^ by 9t^{x) = 7r(0(x)). Finally, we define the typing function 
type^ after argument filtering as type^{a) = a^^ ->•••—)■ ai,. jS if a G T,, 
7r(a) — [ii, . . . ,ik], type{a) = ai ^> • • • a„ ^ /3 and j3 G B; otherwise type^{a) = 
type{a). 

In the examples, except stated otherwise, 7r(/) = [l,...,ri,] if type{f) = 
ai —>•••—?► a„ /? and /? G S (no argument is removed). 

For instance, if7r(sub) = [1] then 7r(div'*(sub(X, F), s(r))) = div''(sub(X), s(y)). 

Note that our argument filtering method never destroys the well-typedness, 
which is easily proved by induction on terms. 

Theorem 4.2 For any argument filtering n and term t T, 7r(t) is well-typed 
under the typing function type^ and type^^nit)) — type{t). 

In the following, we prove the soundness of the argument filtering method 
as a generating method of weak reduction orders. To this end, we first prove a 
lemma required for showing that >7r and >^ are closed under substitution. 

Lemma 4.3 n{t6i) = 7r(t)0^|. 

Proof. We proceed by induction on preterm tO ordered with —^[Jt>sub- 

• In case of t = Xx.u: Since tO \>sub u0, we have Tr{u9-l) = 7r{u)0Tr-l from 
the induction hypothesis. Hence we have: '!t{{Xx.u)9]^) = Xx.t:{u6],) = 
Xx.Tr(u)6Trl^ = Tr(Xx.u)6T,^. 

• In case of t = f(tn), f G T,, and 7r(/) = i: Since t9 t>sub ti9, we have 
\/i.T:{ti9],) = 7r(ti)0^J, from the induction hypothesis. Hence we have: 
TT{fit^)9i) = n{f(uM)) - T^(tM) = Tr{t,)9A = Af(t;:))9A. 

• In case of t = /(t„) , / g S, and 7r(/) is a list: Suppose that t'^ = 

if i ^ 7r(/); otherwise t[ = TT{ti), and t'l = if i ^ "'(/)/ otherwise 
t'l = 'K{ti9\.). For each i, since t9t>subti9, we have 7r(t;04,) = 7r(ti)07ri from 
the induction hypothesis. Then t'l = t[9T,\, holds for each i. Hence we have: 
7rifit^)9i) = nifiuM)) = f{tl) = f{KM) = fit^WA = 7r(/(Q)0a. 

• In case of t = X gV: Obvious from the definition of 9^^. 

• In case of t = X{tn}, X Cz V and n > 0.' Since type{X) = type(X9), we 
have X9 = Xy^.a{uk). For each i, since t9 ^sub ti9, we have ■K{ti9\.) = 
TT{ti)9Tri from the induction hypothesis. Since t9 = {Xy^.a{uk)){tn9) -j> 
a'^){yi ■■= ti9i \ i € n}, we have TT{a{uk){yi := ti9i \ i G n}i) = 
Tr{a{uk)){yi := 7r(ii0J,) | i G n}^. from the induction hypothesis. Hence 
we have: T:{X{t„)9i) = T:{{Xy:^.a{uj:)){tn9i)i) = 'K{a{u^){y, :== tt9i \ i G 
n }l) = TT{a{u^)){ : = ■n{ti9\.) | i G n }| = 7r(a(u ^)){yt ■n{ti)9.^i \ i G 
n}| EE (Alfa .7r(a(u^)))(7r(t„)6l^i)4. = 7r(Ay^.a(?I^))(7r(i„)6'^J,)J, 

= X{^{tn))9A = ^{X{tr.))9A. □ 
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Note that the correspondmg lemma m STRSs is Tr{t9) > 7r(<:)0^ where > is a 
given binary relation |18j . This is the technical reason why the argument filtering 
method on STRSs can apply to only left-firmness (left-hand side variables occurs 
at leaf positions only) STRSsfTSf I18j. This difference originates the fact that 
STRSs allow partial application (ex. foldl F, foldl F X) but HRSs does not. 

Theorem 4.4 For any reduction order > and argument filtering function n, 
>7r is a weak reduction order. 

Proof. It is easily shown that s t =^ C[s] >^ C[t] by induction on C[]. From 
Lemma \4-^ we have s t ^ 7r(s) > 7r(i) =^ T:{s)0Trl. > 7^(^)^^7ri =^ 7r(s04,) > 
■K{t9i) =^ s9i >^ tdl, and s >^ t =^ 7r(s) > 7r(t) ^ ^{3)6^1 > 7r(t)6'jri => 
Tr{s6l.) > TT{t6],) => sO^. >^ tO],. Remaining properties are routine. □ 



Example 4.5 Consider the PFP-HRS Rave in Example \3.7\ Every static re- 
cursion component except {div'(s(X), s(y)) — >■ div*'(sub(X, K), s(y))} is non- 
looping (cf. Examvle \8 . 16\) . We can prove its non-loopingness with the argument 
filtering method, by taking 7r(sub) = 7r(div'*) — [1], and the normal higher-order 
reduction ordering >";jorpo' written {>rhorpo)n in \12f defined by: 

• a neutralization level £ ^ = for all symbol / G S and argument position 
j (in fact, these parameters are relevant for functional arguments only), 

• filtering out all arguments ( a notion introduced in JIS}/ not to be confused 
with the argument filtering method) by taking J^^ = for all f and j 
(again, these parameters are relevant for functional arguments only), 

• a precedence s„ew >s„cu, subnew (o- symbol fnew with f E T, is a new 
symbol introduced by the definition of >rhorpo *^ UM' with the same type 
as f since neutralization levels are null), 

• a multiset (or lexicographic) status for divj^g^, 

• a quasi- ordering on types reduced to the equality (the strict part is well- 
founded since it is empty, and equality preserves functional types). 

Then we have 7r(div'*(s(X), s(y))) = div»(s(X)) >'^,,^^p^ div"(sub(X)) = 
7r(div»(sub(X,y),s(y))), andi?div C (>;\„,pj.. Fortnstance, div^{s{Xj) >^^^^ 
div»(sub(X)) smce FN {dw\s{X)))ip >rhorpo F7V(div'(sub(X)));^ and, be- 
cause C^. and A) = 0, FN{fti ...tn) = fnew FN{ti) . . . FN{tn). From 
Proposition \3.15l the static recursion component for div is non-looping, and 
R div is terminating. 
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5 Usable Rules 



In order to reduce the number of constraints required for showing the non- 
loopingncss of a component, the notion of usable rules is widely used. This 
notion was introduced on TRSs [7l[10] and then extended to STRSs [271 [18]. In 
this section, we extend it to HRSs. 

To illustrate the interest of this notion, we start with some example. 

Example 5.1 We consider the data type heap ::= leaf | node (nat, heap, heap) 
and the PFP-HRS i?hoap defined by the following rules: 



add(0, Y) ^ Y 
add(s(X),r) ^ s(add(X,y)) 
map(Ax.i^(a;), nil) nil 
map(Aa;.F(x), cons(X, L)) cons{F{X),map{Xx.F{x).L)) 
merge(i?, leaf) H 
merge(leaf , H) ^ H 
merge(node(Xi, i/ii, iJi2), node(X2, i?2i, -^22)) 

node(Xi, i/ii , merge(iJi2, node(X2, i?2i, -^22)) 
merge(node(Xi, Fu, i7i2), node(X2, iJ2i, -^22)) 

node(X2, merge(node(Xi, i?i2), i?2i), -^22) 
io\AT{\xyz.F{x,y,z),X,\e&i) X 
io\dT\Xxyz.F{x, y, z), X, node(y. Hi , H2)) 

-> F{X, M<n{\xyz.F{x, y, z), X, Hi), foldT(Axyz.F(x, y, z),X, H2)) 
sumT(ff) ^ foldT(Aa;?/z.add(x,add(?;,2)),0,i/) 
hd(nil) — > leaf 
hd(cons(X, L)) X 
12t(nil) nil 
12t(cons(77, nil)) — > cons(i/, nil) 
12t(cons(iJi,cons(iJ2,i))) ^ 12t(cons(merge(i?i, i/2), 12t(L))) 

list2heap(L) — > hd(12t(map(Aa;.node(a::, leaf , leaf), L))) 

The static recursion components for foldT consists of 

{foldT''(Aa;?/z.i^(a;, y, z), X, node(y, -ffi, i?2)) ^ foldT(Aa;?/z.i^(a:, y, z), X, Hi)} 

for i = 1,2, and their union. By taking 7r(foldT) = 3, these components satisfy 
the subterm criterion. The static recursion components for add, map and merge 
also satisfy the subterm criterion. Hence it suffices to show that the following 
three static recursion components for 12t are non-looping: 

{ 12t''(cons(i7i,cons(iJ2,i))) -> 12t"(cons(merge(i/i,i/2),12t(L))) ■••(1) } 

{ 12t"(cons(7Ji,cons(iJ2,i))) ^lat^^L) •••(2) } 

{(1),(2)} 

The component {(2)} satisfies the subterm criterion. By taking 7r(cons) = [2] 
and 7r(12t) = 7r(12t'') = 1, we can orient the static dependency pairs (1) and (2) 
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hy using the normal higher-order recursive path ordering 

7r(12t''(cons(i?i, cons(iJ2, i)))) 

= cons(cons(L)) >';:horpo cons(L) = 7r(12t"(cons(nierge(i7i, iJa), 12t(L)))) 
7r(12t''(cons(i?i,cons(iJ2,i)))) = cons(cons(L)) >'^horpo ^ = 7r(12t«(i)) 

However, in contrast to Example \4.5[ the non-loopingness of {{!)} and {(1), (2)} 
cannot be shown with the previous techniques. Indeed, we cannot solve the con- 
straint i?hoap ^ More precisely, we cannot orient the rule for hd, because 
7r(hd(cons(X, L))) = hd(cons(L)) does not contain the variable X occurring in 
the right-hand side. 

The notion of usable rule solves this problem, that is, it allows us to ignore 
the rewrite rule for hd for showing the non-loopingness of 12t. 

Definition 5.2 (Usable rules) We denote f >def 9 if 9 is a defined symbol 
and there is some I ^ r £ R such that top{l) = f and g occurs in r. 

We define the set lA{t) of usable rules of a term t as follows. If for every 
X(tn) 6 Sub{t), tn are distinct bound variables, then U{t) = {I ^ r £ R \ 
f >5Qf top{l) for some f £ Vji occurs in t}. Otherwise, lA{t) = R. The usable 
rules of a static recursion component C is U{C) = IJ{W(v') | 'i" — > G C}. 

For each a £ B, we associate the new function symbols J-a o,nd Cq with 
type{La) ~ a and type{ca) ~ a — > a ^> a. We define the HRS C'e as Ce = 
{Ca(xi,X2) ^ Xi \ a e B, i ^ 1,2}. 

Hereafter we omit the index a whenever no confusion arises. 

When we show the non-loopingness of a static recursion component using 
a reduction pair. Proposition 13.151 requires showing that i? C >. The non- 
loopingness is not guaranteed by simply replacing R with 14{C). We can sup- 
plement the gap with the HRS Ce- 

Theorem 5.3 Let R be a finitely-branching PFP-HRS. Then C G SRC{R) is 
non-looping if there exists a reduction pair (Jc^,>) such that U{C) U Ce C >, 
C C > U >, andCn>^(/}. 

The proof of this theorem will be given at the end of this section. 

Example 5.4 We show the termination of the PFP-HRS Rhca,p in Examvle \5. 1[ 
We have to show the non-loopingness of the components {(1)} and {(1),(2)}. 
To this end, it suffices to show that the constraint V({{{1), (2)}) U Cg C > can 
be solved (instead o/i?hcap ^ The usable rules o/{(l), (2)} are: 

merge(-ff, leaf) — H 
merge(leaf , H) — )> H 
merge(node(Xi, i/ii, i7i2), node(X2, i?2i, -^22)) 

^ node(Xi, iJii, merge(ifi2, node(X2, i?2i, -^22)) 
< merge(node {Xi , Hu, Hi2),node{X2, H21, H22)) 

nodc(X2 , merge(node(Xi , iJn , H12 ) , -^21 ) , -^22 ) 
12t(nil) nil 
12t(cons(i?, nil)) — > cons(_ff, nil) 
12t(cons(i7i,cons(iJ2,i))) ^ 12t(cons(mcrgc(ii'i, 772), 12t(i))) 
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The weak reduction order {>rhorpo)-^ orient the rules. Since Ce Q {>rhorpo)-^' 
we conclude that i?hcap is terminating. 

In the rest of this section, wc present a proof of Theorem 15.31 We assume 
that i? is a finitely-branching PFP-HRS, C is a static recursion component of 
and A = {top{l) \ l^reR\ U{C)}. 

The key idea of the proof is to use the following interpretation /. 
Thanks to the Well-ordering theorem, we assume that every non-empty set 
of terms T has a least element least (T). 

Definition 5.5 For a terminating term t £ Ta, I{t) is defined as follows: 

( \x.I{t') ift = Xx.t' 

I{t)=< a{I{t n)) if t = a(t;^) and a ^ A 

[ c4a{I{tn)),Red4{I{t') I t ^.^^^^ ) t'})) ift = a(Ul) and a e A 

Here, for each a E B, Reda{T) is defined as ±q ifT ~ 0; otherwise Ca{u, Reda{T\ 
{u})) where u = least(r). We also define 9^ by 9^ [x) = I{9{x)) for a terminat- 
ing substitution 9. 

The interpretation / is inductively defined on terminating terms with respect 
to >sub U which is well-founded on terminating terms. Moreover, the set 
{I{t') \ t t'} is finite because R is finitely branching. Hence, the above 
definition of / is well-defined. As for argument filterings (Theorem 14. 2p . this 
interpretation never destroys well-typedness. 

Theorem 5.6 For any terminating t , I{t) is well-typed and type{I{t)) ~ type{t). 

Proof. It can be easily proved by induction on t ordered by l>sub ^ I— ' 

Lemma 5.7 Let t be a term and 9 be a substitution such that t9l. is terminating. 
Then, I{t9\.) ^ I{t)e^ i ^ t9^ 1 

Proof. We prove the claim by induction on {{type{x) \ x G dom{0)},t) ordered 
by the lexicographic combination of the multiset extension |>™"' of \>s, and 

>sub U 

• In case oft = Xx.t': Since tt>,ubt' , we have I{t'ei) I{t')9^i t'9^i 
from the induction hypothesis. Hence we have: I{{\x.t')6\,) = I{\x.t'9\.) = 
\x.I{t'9i) ^ \x.I{t')9^i = I{Xx.t')0'i, andl{\x.t')9'i = Xx.I{t')9'i ^ 
Xx.t'9'i = {Xx.t')9^i. 

• In case of t = a{tn) and a ^ A U dom{9): For each i, since t t>sub ti, 
we have I{ti9l.) I{ti)9^ I ti9^ \. from the induction hypothesis. 

Hence we have: I{a{'Q9i) = I{a\tJl)) = a{I{t„9i)) ^ a(l{tn}¥l) = 

a(l{t^)9'i = I{a{t7^))9^i, and I{a{t;,))9'i = a{I(t^)9^ i) ^ a(t~¥l) = 

ait;:)9'i. 
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• In case of t — X E dom{9): Obvious from the definition of 9^ . 

• In case of t = X{tn), X G dom{6) and n > 0; Thanks to the gen- 
eral assumption type{X) ~ type{X9), we let XO = Xy^.aiuk). Since 
type{X) = ai ^ •••—>■ a,! /3 [>s Qii = type(jji) for each i, we have 
I{a{uj^){yi := ti9l \ i e n}l) I{a{W)){yi I{ti9l) \ i G n}i from 
the induction hypothesis. For each i, since t [>sub ti, we have I{ti9\.) 
I{ti)9^ \r ti9^ from the induction hypothesis. Hence, by Theorem 3.9 
in JEIjl (if s ^ t and 9^9' then s9i t9'i), we have: I{X{t;^)9i) = 
J((Ay^.a(tI^))(t„ 6*^)4.) = I{a{uj:){yi := t,9l \ i E ^ I{a{uj:)){y.i := 
I(tM) I i e n} i^ I{a {u^)){y, := l{t,)0'i \ienU = 
{XlM-I{a{Wmi{tn)eiin = X(T( t^)9'i = I{X{t^))9'i, and I{X{t7,))9' i 
= X{I{t„))9'i = iXy^.I{a(uj:))){I{tn)9'i)i = I{a{uj:)){y, := /(tQg^ | 

i e n}i ^ I{a{uj:)){y, ti9^i \ i e n}i = Xy;^.I {a(u^)){tn9^ i)i = 
I{Xy^.a{u^)){tJ^)i = 

• In case of t = f{tn) and f G A; For each i, since t t> sub ti, we have 
I{ti9D I{ti)9^ ]r tj^^i from the induction hypothesis. For an ar- 
bitrary t" such that t — — -> t", we have I(t"9i) I(t")9^i -^> t"9^i 

from the induction hypothesis. Hence we have: I{f{tn)9\.) = /(/(i„6'4,)) = 
c(/(JMT)),ji'ed({ /(f) I t9i ^ t'}))i ^ c{f(l(t;j^),Red{{I{t"9i) \ 

t ^ t" })); ^ c(/(/(i„)0^i), Red{{ I{t")9'i \t^t" })); = c(/(7(t^), 
Redii I{t") \t^t" = I{f {U))9ii, and I{f{U))9'i = c(/(/(t„)), 

Red{{ I{t") I t t" })) 9^i = cifiI{tn)9ii),Red{{ I{t")9^i \t^t" })); 
^ f{I{t^)9'i) ^ f{t^9'i) = f(U)9'i. □ 

For the proof of Theorem 15.31 it is enough to show that I[t9]^) tf?^^. In 
fact, the corresponding lemma for STRSs was the claim [57]. However, the proof 
of the previous lemma required the stronger claim I{t9l) I{t)9^ ]^ t9^ \. 
for applying the induction hypothesis. 

Lemma 5.8 Let t be a term and 9 be a permutation such that t9\, is terminat- 
ing. Then, I{t9\.) = I{t)9'i. 

Proof. We prove the claim by induction on t ordered by \>sub U 

• In case of t = Xx.t' : Since t \>sub t' , we have I{t'9\) = I{t')9^\. from 
the induction hypothesis. Hence we have: I{{Xx.t')9],) = I{Xx.t'9],) = 
Xx.I{t'9i) = Xx.I{t')9'i = I{Xx.t')9^i. 

• In case of t ^ a{tn) and a ^ A U dom{9): For each i, since t [>sub ti, we 
have I{ti9D = I{ti)9^ \, from the induction hypothesis. Hence we have: 
Iia{t;:)9i) = liaiuM)) = a{I{t,M)) = a(/(i„)0^;) = I{a(t;:))9' i. 
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• In case of t = X(tn) and X S dom{9): Since is a permutation, we let 
X0\. = X' \, for a variable X' . For each i, since tc>subti, we have I{ti9].) = 
I{ti)6^i. from the induction hypothesis. Hence we have: I{X{tn)9D = 
I{X'{tM)) = X'iUtJ^) = X'{I{tn)9ii) = X{7{tZ))9'i = i{x{-Q)9'i 

• In case of t = f{tn) and f G A; For each i, since t t> sub ii, we have 
I{ti9D = I{ti)9^ \. from the induction hypothesis. For an arbitrary t" such 
that t ^^^^^^> t" , we have I{t"9D = I{t")9^ \, from the induction hypothe- 
sis. Since 9 is a permutation, we have { I{t') \ t9\, — > } = { I{t"9\.) \ t — ;> 
t" }. Hence we hav e: /(/(Q e*;) = /(/(Ml)) = c{f{I{tn9i)), Red({ I{t') \ 
t9i t' })) = cif{I{t,M)), 

Red ji I{t "9\) I t t"})) EE c{f{I{tn)9^i),Red{{I{t")9^i \ t t" })) = 
c(/(/(t„)), i?ed({ I{t") \t^t" }))9'i = I{f{-Q)9'l □ 

Lemma 5.9 Let I ^ r Cz C U U{C) and 9 be a substitution such that r9\, is 
terminating. Then, I{r9\) = r9^ l. 

Proof. We show the stronger property I[t9\.) = t9^ I for any Z — )■ r G C U U(C) 
and t £ Sub(r). We prove the claim by induction on t. Note that we have no 
case that t = f{tn) and / G A. 

• In case oft = Xx.t' : Since tl>subt' , we have I{t'9D = t'9^ I from the induc- 
tion hypothesis. Hence we have: I{{Xx.t')9l) = I{Xx.t'9l) = Xx.I{t'9-l) = 
Xx.t' 9^ i = {Xx.t')9^i. 

• In case of t = a(t„) and a ^ A U dom{9): For each i, since t \>sub ti, 
we have I{ti9\) = ti9^ ], from the induction hypothesis. Hence we have: 
I{a{U)9i) = I{a{t^)) = a{I{tn9i)) = a(t„0^;) = a{t;:)9' i. 

• In case oft = X(tn) and X G dom{9): Since type{X) ~ type{X9), we have 
X9 = Xy^.a{uk). For each i, since t \>sub ti, we have I{ti9D = ti9^l from 
the induction hypothesis. //ii,...,t„ are mutually distinct bound vari- 
ables, then {yi := ti9^ \ i €n} is a permutation, and hence it follows from 
Lemma\MthatI{X(t;:)9i) = /((Al^;:.a(M^))M)i) = I{a{u^){y, := t,9i \ 
i G nU) = I{a{uj:)){yi := I{ti9i) \ i € ri}i = I{a{u]^)){y, := t,9'i \ i G 
n}i = {Xy;iliaiuj:mtn9i)i = I{Xy^.a{uj:)){tn9')i = X{t;:)9'i. Other- 
wise, I{X{tn)9i) = X(tn)9i and 9 = 9', because o/ A = 0. □ 

Lemma 5.10 If s t and s is terminating, then I{s) ^^J^^^ > I{t). 

Proof. From s — > t, there exists a rule I r £ R, a context E[], and a 
substitution 9 such that s = E[19].] and t = E[r9l]. We prove the claim by 
induction on E[]. 

• In case of E[] = □ and I ^ r E IA{C): From Lemma \ 5. 7\ and \ 5.9\ we 

have: I{s) = I{Wi) ^ I9'i r9^i = I{r9i) = I[t). 

• In case of E[] = Xx.E'[]: I{Xx.E'[l9i]) = Xx.I{E'[l9i\) ^^+^^) 
Xx.I{E'[r9i]) EE I{Xx.E'[r9i]). 
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• In case of E[] = a(. . . , E'[], ...) anda^ A: I{E[Wl]) = f{..J{E'[Wi]), ..) 
^^^^^ /(..., I{E'[r9i]), . . .) ^ I{E[rei]). 

• In case of s = /(s;:) and f G A; I{s) = /(/(s^T)) = c{f{I{s„)),Red{{I{v) \ 
s ^ " })) ^ /(«) \s^v})-^ lit). □ 

Finally, we give the proof of the main theorem for usable rules: 
Proof of Theorem 15.31 Assume that static dependency pairs in C gener- 
ate an infinite chain Uq ^"0'^! ~^ ''^ij ■ • - j which every G C oc- 
curs infinitely many times. Then there exist ^Qj ^i: ^2, • ■ • such that for each i, 
I'j-^i-l' ^ ^ff+i^i+ij" Let i be an arbitrary number. From Lemma 15.71 15.91 and 
EM we have: vfeU ee /(t;«04) ^^^^ HulA+ii) ^ Hence 
we have vlofi > ul^^^ef^^i > vl^^^ef^^i from U{C) U Ce C >. Moreover, from 
C C > U > and C n > 7^ 0, we have JjOji > v^^Oji for infinitely many j. This 
contradicts the well-foundedness of >. □ 



6 Conclusion 

By using the notion of accessibility [3l [2], we extended in an important way 
the class of systems to which the static dependency pair method [T9j can be 
applied. We then extended to HRSs some methods initially developed for TRSs: 
arguments filterings [1] and usable rules [71 [1^. So, together with the subtcrm 
criterion for HRSs jl9j and the normal higher-order recursive path ordering 
|12j . this paper provides a strong theoretical basis for the development of an 
efficient automated termination provcrs for HRSs, since all these methods have 
been shown quite successful in the termination competition on TRSs |30j and 
are indeed the basis of current state-of-the-art termination provers for TRSs 
[H [To]. We now plan to implement all these techniques, all the more so since 
some competition on the termination of higher-order rewrite systems is under 
consideration [24j. Currently, HORPO is the only technique for higher-order 
rewrite systems that has been implemented |25| . One could also build over 
[m [551 [S] to provide certificates for these techniques in the case of HRSs. 

However, there are still some theoretical problems. Currently, the static de- 
pendency pair method does not handle function definitions involving data type 
constructors with functional arguments in a satisfactory way like, for instance, 
the rule Sum5 of Van dc Pol's formulation of /iCRL [31] : 

T,{Xd.Pd) oX ^ ^{(Xd.Pd) o X) 

The first reason is that these arguments are not safe (Definition 13. 3p . This can 
be fixed by considering a more complex interpretations for base types [2]. The 
second reason is that it gives rise to the static dependency pair Y,{Xd.Pd) o X — >■ 
Pd o X the right-hand side of which contains a variable d not occurring in the 
left-hand side. And, currently, no technique can prove the non-loopingness of 
this static recursion component, a problem occurring also in [4]. 
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